Skip to content
Threat Feed
Subscribe

Vendor

Huly

2 briefs RSS
high advisory

Missing Authorization Vulnerability in Huly Platform

Huly Platform versions through 0.7.432 contain a missing authorization vulnerability in the mergeSpecifiedPersons RPC, enabling authenticated account takeover.

Huly Platform identity-management authentication-bypass cve-2026-111606
1t 1c
high advisory

SSRF Vulnerability in Huly Platform Print Service

Huly Platform versions up to 0.7.426 contain a server-side request forgery vulnerability that allows authenticated users to access internal metadata services via the print service.

Huly Platform web-application ssrf vulnerability
1t